AW: Forms D2K Application Testing

What do you mean with "doesn't make any sense"?
Can't you see the requests that you send or do you have
Problems when you intercept the response from the server.

It the last cast you might have zip compression enabled in your browser.
You can check this if you remove the line "Accept-Encoding" from your
requests.

Regards

Hans-Martin Münch

-----Ursprüngliche Nachricht-----
Von: iyer.anant.r@xxxxxxxxx [mailto:iyer.anant.r@xxxxxxxxx]
Gesendet: Donnerstag, 17. April 2008 16:14
An: pen-test@xxxxxxxxxxxxxxxxx
Betreff: Forms D2K Application Testing

Hello,

I need some in carrying out an application penetration testing of a Forms &
D2K applications which are web-enabled. How does on intercept the traffic
(like any HTTP Proxy)? Even though the application is web-enabled, the proxy
I am using (WebScarab) does capture the data, but it does not make any sense
( Am I missing out on some trick here?)

Any help will be deeply appreciated.

Regards,

Anant Iyer

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Relevant Pages

  • Re: Document libaries and isapi filters
    ... I tried to intercept the request with an httphandler, ... because sharepoint stsfltr ISAPI filter intercepts the request ... I developed an HTTPHandler to intercept .aspx requests at the document ... I save it and then (using document libraries events) rename it to ...
    (microsoft.public.sharepoint.portalserver.development)
  • Re: OpenNetCF - Retrieving Latest Source
    ... direct access to it. ... requests, as many users expect all pieces of a download to just work. ... repository, we've got amechanism for that to happen. ...
    (microsoft.public.dotnet.framework.compactframework)
  • Re: Making HTTP requests using Twisted
    ... scale to more than 200 urls or so, because it issues HTTP requests for ... Ideally, I'd like this script to download at most 50 pages in parallel, ... You can pass a timeout to the constructor. ... for (url, timeout, deferredHelper) in queue: ...
    (comp.lang.python)
  • Re: HELP! Trying to add Email Notification to Download File Code
    ... then send an email to the admin when one is downloaded. ... # verifies if the $name is valid for download ... # builds an array with all valid files in the ... # if the directory contents change between requests ...
    (comp.lang.php)
  • Re: Thread Question
    ... going to only download three requests at a time and if one of ... the requests takes a long time it will hold up all the others. ... def run(request, response): ... requestQueue = Queue ...
    (comp.lang.python)